jupvoucher[.]cc

This domain, jupvoucher.cc, is actively flagged as a credential phishing endpoint with elevated risk. Registered on February 21, 2026, through NiceNIC International Group Co., Limited, the domain currently resolves to 94.143.231.148, hosted on AS58212 in Germany. Analysis indicates the domain is present on one security blocklist and is explicitly blocked by at least one threat intelligence feed. The Gridinsoft trust score of 0/100 further corroborates its malicious classification, while VirusTotal reports four out of ninety-five security vendors detecting the domain as malicious, providing additional confirmation of its threat status. Infrastructure analysis reveals the domain uses Let's Encrypt SSL certificate E7, a common choice for both legitimate and malicious sites, which does not inherently indicate compromise but aligns with observed phishing patterns. The nameservers, ns3.my-ndns.com and ns4.my-ndns.com, are consistent with infrastructure used in other low-reputation domains. Access attempts to the domain result in a 'Privacy error' page title, which may suggest either a misconfigured or intentionally obscured phishing landing page, a tactic often employed to evade automated detection or manual review. Defenders should treat this domain as an active threat. The combination of recent registration, low trust scores, and blocklist presence justifies immediate containment measures. Network-level blocking of 94.143.231.148 and the domain itself is recommended, along with monitoring for any internal connections to this endpoint. While the exact phishing kit or targeted brand remains unconfirmed, the domain's infrastructure and detection patterns align with credential harvesting campaigns. Further investigation into associated email campaigns or redirect chains may provide additional context, though no such data is currently available in the provided intelligence.